PT-2015-2583
CVE-2015-6491
·
تاريخ النشر
2015-10-28
·
تاريخ التحديث
2015-10-28
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Allen-Bradley MicroLogix 1100 versions before B FRN 15.000
Allen-Bradley MicroLogix 1400 versions before B FRN 15.003
Description
The issue is related to a lack of restrictions on file uploads in the programmable logic controllers MicroLogix 1100 and 1400. This allows a remote authenticated user to insert the content of an arbitrary file into a FRAME element.
Recommendations
For Allen-Bradley MicroLogix 1100 versions before B FRN 15.000, update to version B FRN 15.000 or later.
For Allen-Bradley MicroLogix 1400 versions before B FRN 15.003, update to version B FRN 15.003 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾